IBM Support

QRadar®: Office 365® RestAPI polling interval

Question & Answer


What is the interval at which the request is made from the QRadar Event Collector to Microsoft® Office 365?
Can I change the interval somehow?


The Office 365 RestAPI protocol has a polling interval set to 1 minute by default. If the protocol fails to connect, the interval increments,  maxing out at 15 minutes.  Once the connection is restored, the interval decrements the interval back to 1 minute.
Currently, there is no way to change this interval.

[{"Type":"SW","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt0AAA","label":"Log Source"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]

Document Information

Modified date:
17 May 2021